auth.zenreach-staging.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:3a:0a:b1:ff:86:15:18:f2:42:9e:26:33:df:da:10 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.zenreach-staging.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:3a:0a:b1:ff:86:15:18:f2:42:9e:26:33:df:da:10
Serial Number (int): 17581334089560501085842293958897555984
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2f:be:57:c0:f9:d7:18:22:fc:2f:66:cc:51:71:4d:8f:4b:9c:24:21
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 87:71:ee:75:9e:07:78:d6:4c:7a:2e:5c:9f:d7:60:e5:dc:5a:98:be
Fingerprint (sha256): 0d:19:ab:6a:68:0e:45:bb:ad:33:94:3d:71:07:d5:ed:67:20:9b:ac:3a:e8:45:bc:d6:82:04:ff:0f:15:a9:cf

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate auth.zenreach-staging.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.zenreach-staging.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.zenreach-staging.com
auth.service.zs.cntr.io
auth.service.uw2.zs.cntr.io

Other certificates including the domain name zenreach-staging.com

(limited to 100 certificates)
maestro.zenreach-staging.com
developer-site.uw2.zs.cntr.io
auth.zenreach-staging.com
api.zenreach-staging.com
maestro.zenreach-staging.com
my.zenreach-staging.com
api.zenreach-staging.com
www.zenreach-staging.com
portal.zenreach-staging.com
zenreach-site.service.uw2.zs.cntr.io
portal.stag.cntr.io
maestro.zenreach-staging.com
developer-site.uw2.zs.cntr.io
developer-site.uw2.zs.cntr.io
my.zenreach-staging.com
pos-hookrcvr.uw2.zs.cntr.io
auth.zenreach-staging.com
zenreach-site.service.uw2.zs.cntr.io
auth.zenreach-staging.com
zenreach-site.service.uw2.zs.cntr.io
api.zenreach-staging.com
datadogrelay.zenreach-staging.com
pos-hookrcvr.uw2.zs.cntr.io
zenreach-staging.com
developer-site.uw2.zs.cntr.io
auth.zenreach-staging.com
zenreach-site.service.uw2.zs.cntr.io
hs2portal.zenreach-staging.com
papi.zenreach-staging.com
zenreach-staging.com
my.zenreach-staging.com
maestro.zenreach-staging.com
my.zenreach-staging.com
auth.zenreach-staging.com
zenreach-site.uw2.zs.cntr.io
observe.zenreach-staging.com
maestro.zenreach-staging.com
www.zenreach-staging.com
pos-hookrcvr.uw2.zs.cntr.io
pos-hookrcvr.uw2.zs.cntr.io
my.zenreach-staging.com
portalcdn.zenreach-staging.com
my.zenreach-staging.com

Certificate

The complete raw certificate details for auth.zenreach-staging.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIQDToKsf+GFRjyQp4mM9/aEDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTExMjUwMDAwMDBaFw0yMDEyMjUx
MjAwMDBaMCQxIjAgBgNVBAMTGWF1dGguemVucmVhY2gtc3RhZ2luZy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDna+ikUdnWx3oqJWuZvIiVYlhC
i6aZDm2j3XgztA0KI9lLYH1oLqA1+UZsHDbDz5B3mYtdfd/zTjlyhgFCUi88N6YS
xX+d/6wEwnn0Rro0y+kRSdNIWw6vN3w7c6yWeBvixUBNFgQAJNaOfV4KFfGiJQ7f
FGghVGnH94jqj5LocS2GRhvUC+On+9NvubTJ4R2sHOGRxRgQZ4bS/iIT6aoeRipk
IYE4GSrFeXIGUOVljRHw2umsnd6mJ1mKdRsGPCrP+iAKH6rhyEoTAzF5ihNV/oW2
+RSySsE04ZVQgvF7aQPqbQugLKnXXO9y5UpaI9Al8dNeHwS81ivQYZ3JIlfDAgMB
AAGjggK7MIICtzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNV
HQ4EFgQUL75XwPnXGCL8L2bMUXFNj0ucJCEwWgYDVR0RBFMwUYIZYXV0aC56ZW5y
ZWFjaC1zdGFnaW5nLmNvbYIXYXV0aC5zZXJ2aWNlLnpzLmNudHIuaW+CG2F1dGgu
c2VydmljZS51dzIuenMuY250ci5pbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j
cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsG
CWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB
hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG
Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV
HRMBAf8EAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFuo8gtLAAABAMASDBGAiEAoQPNTfxEMaGh
WuZXkee7cbd2CGcvQNd+Hw4N3KAcrU0CIQDN05u7dwopfEPiZaM5Q1ynaFi0iaRF
fI2ufv6VEfB6RAB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAAB
bqPILcMAAAQDAEYwRAIgGjhgl/44R1zUaAchrERSN26gDon3k2pEHlFhbw8n0e4C
IF9c5NxXakrgPTKDxgk1SB3t35H4iKozCIXFnshWftsNMA0GCSqGSIb3DQEBCwUA
A4IBAQCUK+MlcbKPn0iGCbq4EvSiisnSYHnQFYKJSNAL7FDhvkXP7edhRRpFesWn
Emn4oLsjeFxW5s4tCEQQralGJG0iyf83qGMx0rPH7CQp6pDuhijy+Fb+9u0VNPHt
crmzWnZM2DIMRawhavQOprTMeVVYDq8ze0g9MVdkYPjd7meO5Pt/AqHcQW/iBFBH
F7VGN81wlhJiCh/SUxTzkUSCWblHkKtGR8z5ThUSHCfgGG5nys81zCy3+ovD64s6
GY5H8q+b/lBgKH03whycPMRjrWdzc/E7q6sg+sv0ALPN7CHGC2bKcg9EJm78k1EW
FWBTxjovPTah7EXKayv8ViMdj1TD
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52vopFHZ1sd6KiVrmbyI
lWJYQoummQ5to914M7QNCiPZS2B9aC6gNflGbBw2w8+Qd5mLXX3f8045coYBQlIv
PDemEsV/nf+sBMJ59Ea6NMvpEUnTSFsOrzd8O3Oslngb4sVATRYEACTWjn1eChXx
oiUO3xRoIVRpx/eI6o+S6HEthkYb1Avjp/vTb7m0yeEdrBzhkcUYEGeG0v4iE+mq
HkYqZCGBOBkqxXlyBlDlZY0R8NrprJ3epidZinUbBjwqz/ogCh+q4chKEwMxeYoT
Vf6FtvkUskrBNOGVUILxe2kD6m0LoCyp11zvcuVKWiPQJfHTXh8EvNYr0GGdySJX
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17581334089560501085842293958897555984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.zenreach-staging.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29214260238624711491958564653554352632457092542005735632436789149090912928810231002595835562171696050789980161210308114515158089966155381644127750607285179118596838717752992881226757267603993700855773089598393358478626108607983683247178246920059419433192941019810696525901848434991111366930636015257207015939868789875099768668056442601161407893315448204159464916870751574708770005799545396210679358840951325549184472601453426748124380511786727993029528006283158260813406645864271715055626625255577002899521352284166357659274087232730252060770722242191811792042690266940323761189254670415409209992925239648602783111107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fbe57c0f9d71822fc2f66cc51714d8f4b9c2421
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.zenreach-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.service.zs.cntr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.service.uw2.zs.cntr.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ea3c82d2c0000040300483046022100a103cd4dfc4431a1a15ae65791e7bb71b77608672f40d77e1f0e0ddca01cad4d022100cdd39bbb770a297c43e265a339435ca76858b489a4457c8dae7efe9511f07a440075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ea3c82dc3000004030046304402201a386097fe38475cd4680721ac4452376ea00e89f7936a441e51616f0f27d1ee02205f5ce4dc576a4ae03d3283c60935481deddf91f888aa330885c59ec8567edb0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00942be32571b28f9f488609bab812f4a28ac9d26079d015828948d00bec50e1be45cfede761451a457ac5a71269f8a0bb23785c56e6ce2d084410ada946246d22c9ff37a86331d2b3c7ec2429ea90ee8628f2f856fef6ed1534f1ed72b9b35a764cd8320c45ac216af40ea6b4cc7955580eaf337b483d31576460f8ddee678ee4fb7f02a1dc416fe204504717b54637cd709612620a1fd25314f391448259b94790ab4647ccf94e15121c27e0186e67cacf35cc2cb7fa8bc3eb8b3a198e47f2af9bfe5060287d37c21c9c3cc463ad677373f13babab20facbf400b3cdec21c60b66ca720f44266efc935116156053c63a2f3d36a1ec45ca6b2bfc56231d8f54c3